Privacy Policy

1. Purposes of Processing

Metapret processes personal data only for the purposes below. If a purpose changes, we give notice and obtain consent beforehand.

• ·Verifying interpreter identity and preventing duplicate registration
• ·Administering and grading interpretation tests, and assigning tiers
• ·Reviewing interpreter profiles and listing them in the public directory
• ·Receiving requests, matching interpreters, and preparing and sending quotes
• ·Concluding and performing contracts, processing payment, and paying interpreters
• ·Service notices, responding to enquiries, and handling disputes
• ·Preventing abuse and keeping payment security records
• ·Traffic-source analysis and service improvement
• ·Measuring whether online ads led to actual requests

2. Personal Data We Process

Interpreter members

• ·Required: name (including romanized name), date of birth, mobile phone number, email address
• ·Optional: profile photo, resume file and its contents (education, career history, certifications), city and country of residence, language pairs, specialization, desired rate, self-introduction, available regions and hours
• ·Only where a payout arises: account holder name, bank name, account number, or Payoneer account email

Interpretation tests

• ·Candidate voice recordings and answer content
• ·Grading results, evaluator comments, and tier decision history

Clients

• ·Contact person's name, email address, phone number, company name
• ·Venue address, schedule, request details, and reference materials

Automatically generated or collected

• ·Access IP address, browser information (User-Agent), access time, and service usage records
• ·Payment attempt and decline records (to prevent fraudulent payment)
• ·Information collected by cookies and by analytics and advertising tags (described separately in Section 8)
• ·Email address and account identifier received from Google when you sign in with a Google account

Metapret does not collect unique identifiers such as resident registration numbers or passport numbers. We also do not collect sensitive data such as beliefs, health, or sex life, and we ask that such details not be written into resumes or self-introductions.

3. Processing and Retention Periods

We destroy personal data without delay once the period below ends or the purpose is fulfilled. Items that other statutes require us to keep are stored separately from other personal data for the period required.

• ·Account and profile information: until the member withdraws
• ·Test voice recordings and grading records: kept while membership is active and destroyed on withdrawal
• ·Contract and withdrawal-of-offer records: 5 years (Act on Consumer Protection in Electronic Commerce, Article 6)
• ·Payment and supply-of-service records: 5 years (same Article)
• ·Consumer complaint and dispute records: 3 years (same Article)
• ·Labeling and advertising records: 6 months (same Article)
• ·Books of account and supporting documents: 5 years (Framework Act on National Taxes, Article 85-3)
• ·Service access logs: at least 1 year (PIPA Enforcement Decree Article 30 and the Security Measure Standards)
• ·Traffic-source cookie: 30 days (Section 8). Traffic-source data recorded on a request follows that request's retention period
• ·Usage-analytics cookie: 1 year; Google advertising cookies: 90 days (Section 8)

4. How We Destroy Personal Data

• ·Procedure: once the retention period ends or the purpose is fulfilled, the data is identified and destroyed with the approval of the privacy officer.
• ·Electronic files: permanently deleted by a method that prevents recovery or reproduction. Records are removed from the database, and any copy remaining in a backup expires when that backup's retention cycle ends.
• ·Voice recordings and resume files: the stored objects are deleted and are not restored afterwards.
• ·Paper documents: shredded or incinerated.
• ·Personal data we must keep under a statute is stored for the period stated in Section 3 in a database or storage area separated from other personal data, and is not used for any purpose other than that preservation.

5. Provision to Third Parties

• ·As a rule, Metapret does not provide personal data to third parties.
• ·During matching we give the client only the minimum needed to judge a match, such as the interpreter's name or pseudonym, language pairs, specialization, tier, and a career summary. Contact details are provided only after a contract is confirmed.
• ·Interpreters receive the schedule, venue, request details, and the client contact for assignments they have been confirmed on.
• ·Otherwise we provide data only with separate consent from the data subject, where a statute specifically provides for it, or where an investigative authority requests it through the procedure and method prescribed by law.

6. Processors We Use

To operate the service, Metapret entrusts the processing of personal data to the providers below. Our agreements with them set out safe-handling obligations in writing, and we update this policy whenever a processor or its task changes.

We do not give external reviewers applicants' names or contact details. Reviewers grade inside Metapret, seeing only the test passage and the recording. Our agreement with them forbids downloading or keeping recordings, and when the agreement ends they must destroy what they received and confirm to us that they have.

7. Overseas Transfer of Personal Data

Metapret's database and web servers are located outside Korea, and personal data is transferred overseas as set out below in order to provide the service. These transfers are entrustments and storage necessary to perform our contract with you, and are carried out by disclosing the following in this policy under Article 28-8(1)3(a) of the Personal Information Protection Act.

Timing and method of transfer

Personal data is transmitted in encrypted form over the network at the moment it is collected during your use of the service, and is then stored on each processor's systems. We do not perform bulk transfers on physical media.

Recipient's retention and use period

Each recipient retains personal data only for as long as needed to perform the entrusted task, and destroys it or returns it to Metapret once the retention period in Section 3 ends or the agreement terminates.

Recipient contact details

You can find each provider's contact details and privacy policy below.

• ·Supabase Inc.: https://supabase.com/privacy
• ·Vercel Inc.: https://vercel.com/legal/privacy-policy
• ·Twilio Inc.: https://www.twilio.com/en-us/legal/privacy
• ·Plus Five Five, Inc. (Resend): https://resend.com/legal/privacy-policy
• ·Anthropic PBC: https://www.anthropic.com/legal/privacy
• ·ElevenLabs, Inc.: https://elevenlabs.io/privacy
• ·Inngest Inc.: https://www.inngest.com/privacy
• ·PostHog Inc.: https://posthog.com/privacy
• ·Google LLC: https://policies.google.com/privacy

How to refuse an overseas transfer, and what follows

If you do not want your data transferred overseas, contact cs@metapret.net and tell us. Note that the transfers listed above are needed to provide core functions such as sign-up, taking a test, submitting a request, and paying, so refusing means those functions cannot be used; if you already hold an account we will guide you through withdrawal. We do not disadvantage you for refusing.

8. Cookies and Tags, and How to Refuse Them

Metapret uses cookies and tags to run the service, analyze how it is used, and measure advertising performance. Each kind is listed below.

Cookies the service needs to work

• ·Keeping you signed in: cookies whose names start with sb-, until you sign out
• ·Language preference: mp-locale, 1 year
• ·Page to return to after sign-in: mp-return-to, 30 minutes
• ·These cookies are stored only on Metapret's domain and are not sent elsewhere. If you block them, you cannot sign in.

Traffic-source cookie

• ·Cookie name: mp-attr
• ·Lifetime: 30 days
• ·Contents: advertising identifier, campaign parameters, referring site, first page visited, first-visit time
• ·Written once on the first visit and never updated afterwards
• ·Holds nothing that identifies you personally, such as a name or contact detail
• ·The contents of this cookie are not sent to any third party

Usage analytics (PostHog)

• ·Collected by: PostHog Inc.
• ·Cookie: names starting with ph_, 1 year
• ·Items: signed-in user's account identifier and email address, page navigation history, error records
• ·Purpose: finding where people get stuck so we can fix the service. It is not used for advertising.

Advertising measurement tag (Google)

• ·Collected by: Google LLC
• ·Cookie: names starting with _gcl_, 90 days. Google may also store cookies on its own domains for periods it sets
• ·Items: ad click identifier, visited page addresses, whether a request was submitted and its request number, access IP address and browser information
• ·Method: collected automatically by the Google tag in your browser when you visit the site
• ·Purpose: measuring which ads led to actual requests
• ·We do not send your name, email address, phone number, or request details to Google
• ·Google handles this data under its own privacy policy (https://policies.google.com/privacy)

How to refuse

Block or delete this site’s cookies in your browser, using its per-site controls (Chrome: Settings > Privacy and security > Site settings; Safari: Settings > Privacy > Manage Website Data). The cookies Metapret sets belong to the metapret.net domain, so a “block third-party cookies” setting alone will not stop them; block metapret.net specifically. Google advertising preferences can be changed at https://adssettings.google.com. Blocking the cookies the service needs will stop you signing in, but blocking any of the other cookies or tags does not limit your use of MetaPret.

9. Automated Decision-Making

Metapret does not finalize an interpreter's tier or engagement, or a quote amount, on the output of AI or automated calculation alone; a person confirms it first. Some steps do rely on automated processing and artificial intelligence, so we set out the criteria and procedure below.

• ·Interpreter tiering: AI is used only to generate test passages and to assist grading. The final tier is set by human evaluators' scoring and operator review.
• ·Grading of project interpretation tests: AI first drafts a grade and a ranking, and a person confirms the result. Details are set out separately below.
• ·Resume handling: AI reads the resume you upload and organizes it into education, career, and certification fields. You can review and correct the result on your own profile.
• ·Candidate shortlisting: candidates are shortlisted automatically on language pair, specialization, active region, schedule, and tier. The client chooses which interpreter is actually engaged.
• ·Quote calculation: the amount is computed automatically from field, interpretation mode, duration, headcount, and region. An operator reviews and approves it before it is sent.

AI grading of project interpretation tests

• ·Who and when: this applies to interpreters who apply to a specific request and take that request's interpretation test. The grading runs only after the client has accepted the quote.
• ·Purpose: when there are many applicants, to decide the order in which reviewers listen to recordings, and to draft a grade that assists human grading.
• ·Data used: the test recording, a text transcript of it, timing information such as how long you took to start speaking, pauses and length, and the test passage. Your name and contact details are not used and are not sent to either provider.
• ·Procedure: ElevenLabs first transcribes the recording and produces the timing information. Anthropic's AI (Claude) then reads the test passage, the transcript and the timing information and drafts deductions grouped by error type. Points are calculated from a deduction table that Metapret sets in advance; the AI does not set the points itself. These points produce a draft ranking within the request.
• ·Criteria considered: content (anything omitted or rendered wrongly), target-language expression, and delivery (delayed start, long pauses, excessive length and similar).
• ·Human confirmation: for each request, a human reviewer listens to and grades the recordings of the top five applicants in the AI ranking (five times the number of interpreters, where a request needs more than one). Every applicant whose AI grading failed, or whom the AI marked as having no recognizable speech, low confidence, or a suspected reversal of meaning, is listened to by a person regardless of rank. Any score and feedback we give interpreters is one a person has confirmed.
• ·Please note: recordings of applicants outside these groups may not be listened to by a reviewer, and in that case their order within the request follows the AI draft. Which interpreters are put forward and engaged is decided by operators and the client, not by the AI alone.
• ·No sensitive data and no personal data of children under 14 are used in this processing. We do not use recordings to identify who is speaking.

How to ask for an explanation or human review

• ·Explanation: you may ask us to explain the result, the main types of data used, the main criteria including how that data affected the result, and the procedure.
• ·Comments and review: you may submit comments or material, for example about your recording conditions, and ask a person to reconsider the result in light of them. We will tell you whether they were taken into account and what the outcome was.
• ·You may ask for an explanation or human review of the other processing above (interpreter tiering, resume handling, candidate shortlisting, quote calculation) in the same way.
• ·How to ask: email the address below with your sign-up email or name, the request you applied to, and what you are asking for. There is no set form.
• ·Timing: we act within 30 days of receiving your request and tell you the outcome by email or in writing. If we cannot do so in time for a legitimate reason, we tell you why first and may extend the period twice, by up to 30 days each time. If we cannot accept a request for a legitimate reason, such as a risk of unfairly harming someone else's rights, we tell you the reason without delay.

Send such a request to cs@metapret.net.

10. Your Rights and How to Exercise Them

• ·You may at any time ask to access, correct, delete, or suspend the processing of your personal data, and you may withdraw consent for anything processed on the basis of consent.
• ·Profile and account details can be edited directly on your profile page after signing in. Send any other request to the contact below.
• ·We act on a request within 10 days and tell you the outcome. If it will take longer, we tell you why and how long we expect it to take, first.
• ·Where a statute requires us to preserve data, we cannot destroy it during that period even if you ask. We will tell you the reason in that case.
• ·You may act through a representative, in which case a letter of authority must accompany the request.
• ·We do not collect personal data from children under 14. If we learn that data from a child under 14 has been collected, we destroy it without delay.

Send requests to cs@metapret.net

11. Security Measures

• ·Administrative measures: the number of people handling personal data is kept to a minimum, access is granted only to the extent the work requires, and access is revoked without delay once that work ends.
• ·Access control: row-level access control is applied to the database and storage so that a user can reach only their own data. Operator screens require an additional authentication step.
• ·Access logging: access to systems that handle personal data, and operator actions on it, are recorded and retained.
• ·Encryption: passwords are stored in a form that cannot be decrypted, and all traffic between the site and our servers is encrypted (HTTPS).
• ·File protection: resumes and voice recordings are held in non-public storage and are downloadable only through time-limited links issued to authorized requests.
• ·Payment security: payment attempts and declines are logged separately so that abnormal activity can be reviewed. Metapret does not store card numbers or other payment credentials; the payment processor handles them.

12. Privacy Officer and Access Requests

We have designated a privacy officer to oversee personal data processing and to handle related enquiries, complaints, and remedies. Metapret is a sole proprietorship, so the owner also serves as the privacy officer (Personal Information Protection Act, Article 31(2)).

• ·Name: Dahoon Kim
• ·Position: Owner (also serving as privacy officer)
• ·Email: cs@metapret.net

Requests to access personal data are received at the same contact. The privacy officer reviews and handles them directly.

13. Remedies for Infringement of Your Rights

If you need advice or redress for a privacy infringement, you can contact the bodies below. They operate independently of Metapret.

• ·Personal Information Dispute Mediation Committee: 1833-6972 (www.kopico.go.kr)
• ·Privacy Infringement Report Center: 118 (privacy.kisa.or.kr)
• ·Supreme Prosecutors' Office, Cybercrime Division: 1301 (www.spo.go.kr)
• ·Korean National Police Agency, Cyber Bureau: 182 (ecrm.police.go.kr)

If a data controller refuses or improperly handles a request made under Articles 35, 36, or 37 of the Personal Information Protection Act and your rights or interests are harmed, you may file an administrative appeal under the Administrative Appeals Act.

14. Changes to This Policy

• ·When we change this policy we post the change and its effective date on this page at least seven days before it takes effect.
• ·The header states the amendment date, effective date, summary of changes, and the previous effective date, so you can tell which version you are reading.
• ·If this policy and a contract we have made with you differ, whichever is more favorable to you applies.